Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/hUwMMeOsqUPmQEZ0ZqwFPzH8d0Q.roa
File: hUwMMeOsqUPmQEZ0ZqwFPzH8d0Q.roa (raw, json)
Hash identifier: LCkluD9mGYJr37ZXeGmSNBIy+HmYDVdUcAkKzm4X5s8=
Subject key identifier: 85:4C:0C:31:E3:AC:A9:43:E6:40:46:74:66:AC:05:3F:31:FC:77:44
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 01A0E7A487A6BDBB7F6FFB767B2C0CEE53D2
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/hUwMMeOsqUPmQEZ0ZqwFPzH8d0Q.roa
Signing time: Mon 28 Sep 2026 10:51:54 +0000
ROA not before: Mon 28 Sep 2026 10:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206728
IP address blocks: 45.141.85.0/24 maxlen: 24
45.141.86.0/24 maxlen: 24
45.141.87.0/24 maxlen: 24
91.220.163.0/24 maxlen: 24
194.26.29.0/24 maxlen: 24
194.26.69.0/24 maxlen: 24
2a0b:7ec0::/29 maxlen: 48
2a0b:7ec0:1320::/48 maxlen: 48
2a0b:7ec0:1321::/48 maxlen: 48
2a0b:7ec0:7701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:a4:87:a6:bd:bb:7f:6f:fb:76:7b:2c:0c:ee:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Sep 28 10:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=854c0c31e3aca943e640467466ac053f31fc7744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:ef:5e:c2:0b:cb:55:65:8f:64:d1:ec:38:
7f:3e:c7:7c:6f:2d:c4:d0:da:de:5d:09:af:80:53:
ac:c5:c6:fe:d4:02:b0:e7:d9:a5:8d:b7:ef:a8:c2:
fb:92:03:fb:98:9b:e2:ae:d4:ee:42:f2:12:ef:fb:
54:a3:5b:1b:af:8a:80:58:00:d4:64:35:69:6e:b8:
c0:53:6d:c9:ce:a4:47:ad:9b:6b:31:57:af:32:8b:
15:c8:bc:5c:d3:e9:60:1c:77:1a:53:cd:61:af:3c:
3b:80:15:71:6f:e2:10:57:fc:ea:ea:1f:eb:e3:7f:
cd:0d:33:6d:4a:42:5e:fb:86:70:12:ab:bf:87:4d:
b7:78:3f:5d:15:a3:5e:fd:95:16:9b:9e:8b:f0:b1:
5c:89:ab:b9:45:e3:49:a1:fa:3a:e8:27:a9:6b:14:
50:65:45:19:a1:bb:63:5b:aa:56:a1:74:e6:da:74:
48:8a:24:1e:1b:aa:50:ea:32:e2:a5:1a:f6:72:b8:
e9:8b:67:03:95:c2:3e:00:ce:32:24:f8:71:02:fd:
37:71:9d:89:4c:1e:9b:9f:e9:21:54:8e:25:e2:5a:
a3:72:61:72:b7:f6:7a:fb:68:40:82:11:ba:43:26:
f1:32:35:6f:81:47:51:58:a9:76:d3:05:d2:c8:61:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:0C:31:E3:AC:A9:43:E6:40:46:74:66:AC:05:3F:31:FC:77:44
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/hUwMMeOsqUPmQEZ0ZqwFPzH8d0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.85.0-45.141.87.255
91.220.163.0/24
194.26.29.0/24
194.26.69.0/24
IPv6:
2a0b:7ec0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:28:01:6e:c9:03:a6:f5:60:28:85:76:4c:de:90:bf:cc:e7:
66:52:9a:c1:23:6d:b9:e5:99:92:1e:62:9b:7c:47:67:2e:c6:
b2:f5:51:e3:07:bf:da:e7:37:99:63:86:a1:53:69:15:6b:22:
c3:49:6c:89:19:6f:74:2a:e0:f6:4e:45:bd:41:4a:a4:2e:8d:
25:87:d1:8e:3f:5b:6e:1e:ec:21:e8:e8:02:38:71:1a:55:9a:
ac:4d:68:fc:44:29:65:8d:63:cc:8c:cd:49:46:7c:03:6b:40:
16:37:dc:9f:f2:26:9e:60:dc:99:cd:bf:98:df:0e:89:e3:ae:
bc:0b:d8:0f:c9:3c:e5:6c:31:c1:92:12:de:43:86:d6:78:e0:
af:a6:6e:fa:89:f7:75:fb:0e:63:ad:0d:1e:6d:a8:a9:6e:43:
13:29:f4:1c:3d:90:ea:be:02:c2:5f:a1:1a:ae:74:32:77:19:
99:fa:82:0d:3b:60:fa:7f:3c:d1:f6:63:5a:13:b9:96:a3:33:
dc:c0:15:06:d2:f9:b8:98:04:32:09:6c:84:9f:52:2e:a5:94:
dc:27:40:52:ab:26:7c:7f:9d:9e:72:1c:07:63:57:86:5c:04:
9e:4f:91:a8:be:20:47:ac:d1:ff:c0:b2:b2:30:39:cf:81:2b:
c2:d6:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:56 2026 by rpki-client